For a more checklist oriented approach you might also find this other list helpful.

It is a reminder of all measures you could take, at a higher level, about technical as well as cultural things you need to do about security.

https://cto-security-checklist.sqreen.io/

Full disclosure: I worked on it (feel free to send me feedback)